High-Level Overview
Twosense, Inc. is a cybersecurity company specializing in behavioral multi-factor authentication (MFA) through continuous authentication using passive biometrics like typing patterns and mouse movements.[1][2][3][4] It builds a software-only platform that creates user behavior profiles to automate over 95% of MFA challenges invisibly, flagging unauthorized access in seconds, and serves sectors including BPO contact centers, healthcare, enterprises, and government—starting with the US Department of Defense (DoD).[1][3][4] The solution solves mistaken identity fraud, which accounts for 50% of cybercrime damages, by providing phishing-resistant, PCI-compliant verification without hardware, phones, or cameras, reducing failed logins by 89% and help-desk tickets by 79% in deployments like a top US health system securing 17,000 users across shared workstations.[2][3][4]
Growth momentum includes a $2.42 million DoD contract for AI-driven behavioral biometrics, expansion from DoD to enterprise customers, and funding from Entrepreneurs Roundtable Accelerator.[2][3]
Origin Story
Twosense was founded in 2014 (with some sources noting 2015) in Brooklyn, New York, by Dawud Gordon (CEO, Co-Founder; PhD in Computer Engineering from Karlsruhe Institute of Technology, background in AI and wearable tech) and John Tanios (CTO, Co-Founder; experienced full-stack developer with expertise in systems design, deep learning, and data science from CUNY College of Staten Island).[1][2][3] Ulf Blanke (PhD, Senior Scientist at ETH Zurich, co-founder of antavi) serves on the advisory board.[2] The idea emerged from Gordon's research in mobile behavioral biometrics to combat $1 trillion in annual cybercrime damages, particularly mistaken identity in mobile payments and e-commerce, launching initially with the US DoD as its first customer before expanding to enterprises and contact centers.[1][2][3]
Core Differentiators
- Software-Only, Invisible Operation: Analyzes keystroke timing, mouse movements, and other passive biometrics in the background to generate real-time trust scores, automating authentication without user friction, hardware, phones, webcams, or prompts—PCI-compliant and phishing-resistant.[1][3][4]
- Continuous Authentication and Access Evaluation (CAE): Extends session timeouts securely, automates 95%+ of MFA, and flags anomalies in seconds; proven in high-stakes environments like shared clinical workstations.[1][4]
- Targeted Sector Fit: Tailored for BPO contact centers, healthcare (e.g., 1M+ passwordless logins for 17,000 users, 89% drop in failed logins), government (DoD contract), and enterprises, integrating seamlessly with workflows.[3][4][5]
- Proven Impact and Compliance: Reduces help-desk tickets by 79%, boosts clinician time with patients, and holds DoD validation; competitors like Biometric Signature ID lack the continuous, hardware-free focus.[1][4]
Role in the Broader Tech Landscape
Twosense rides the passwordless authentication trend in cybersecurity, addressing rising identity-based attacks amid $170 billion industry growth driven by mobile fraud and zero-trust mandates.[2][4] Timing aligns with healthcare's shared workstation challenges, regulatory pressures (e.g., PCI, HIPAA), and DoD's push for AI biometrics post-high-profile breaches, where traditional MFA fails 50% of mistaken identity cases.[1][2][3] Market forces like escalating cybercrime ($1Tn damages) and demand for frictionless security favor its invisible, scalable model, influencing the ecosystem by pioneering behavioral biometrics in regulated verticals and enabling broader adoption of continuous monitoring over static credentials.[2][4]
Quick Take & Future Outlook
Twosense is poised to expand its Continuous Authentication platform beyond healthcare and DoD into more enterprises, leveraging AI advancements in behavioral signals for fully automated identity security.[1][4] Trends like zero-trust architecture, rising AI-driven threats, and passwordless mandates will accelerate growth, potentially through larger government contracts and integrations with clinical apps. Its influence may evolve by setting standards for hardware-free MFA, reducing human error in high-compliance sectors and capturing share in the booming continuous auth market—transforming cybersecurity from reactive to invisible and proactive, much like its core promise of automating authentication out of existence.[2][3][4]